Reschedule router if new external gateway is on other network

An L3 agent may be associated with just one external network.
If router's new external gateway is on other network then the router
needs to be rescheduled to the proper l3 agent

Change-Id: Ia0ed924403137ac4578ca562b57988292c41c1fe
Closes-Bug: #1234750
Allow combined certificate/key files for SSL

Allows the ssl_key_file parameter to be excluded
during SSL operation to support combined certificate/key files.

Closes-Bug: #1303312
Change-Id: Ied5c7a7657e0e26eda31305fc96104c6593e9593
Add nova_api_insecure flag to neutron

Neutron did not have any way to allow SSL validation problems in the
novaclient similar to the way nova has the neutron_api_insecure flag.
This change adds the nova_api_insecure flag to the neutron config and
also passes it in the novaclient instantiation.

Change-Id: Ifed581df253c01fab9dc1f22c8187876271b378e
Closes-Bug: #1306822
Fix LBaaS Haproxy occurs error if no member is added

If no member is added and session_persistence.type=HTTP_COOKIE,
haproxy agent would not add cookie persistence option to the backend.
Closes-Bug: #1302283

Change-Id: Ifa2564df924c2555225a749a99c705b3f1caab4a
Merge "Reschedule router if new external gateway is on other network"
DHCP agent should check interface is UP before adding route

The DHCP agent should check not only that an interface for
network's DHCP exists but also make sure that is UP before
adding a default route.
For this purpose a method "ensure_device_is_ready" was
added to ip_lib.

Change-Id: I9af06aa0f39634fe7b63c064337cd4191db5c026
Closes-bug: #1302312
Merge "Add nova_api_insecure flag to neutron"
Merge "Fix LBaaS Haproxy occurs error if no member is added"
Merge "Allow combined certificate/key files for SSL"
Merge "DHCP agent should check interface is UP before adding route"
ofa_neutron_agent: Fix _phys_br_block_untranslated_traffic

Install the flow to the correct bridge.

Closes-Bug: 1301142
Change-Id: I2aa7ffd6bb297837a39cdd00794af100bf9ab407
ofagent: Fix VLAN usage for TYPE_FLAT and TYPE_VLAN

Closes-Bug: 1301144
Change-Id: I3df821fd72471f8bd84366e3b5a1cc7e3489156c
OFAgent: Process port_update notifications in the main agent loop

Port the following patch to OFAgent.
commit: 5e6e592132aa9a98936ce3bfdb66efc7832caafb
https://review.openstack.org/#/c/61964/

Partial-Bug: 1293265

Change-Id: I53813d12c66dc746cd373fd91ff9bd9bdbf222db
OFAgent: Improve handling of security group updates

Port the following patch to OFAgent.
commit: 3046c4ae22b10f9e4fa83a47bfe089554d4a4681
https://review.openstack.org/#/c/63100/

Partial-Bug: 1293265

Change-Id: Iecdfee894ff2fd5f05f63f040dd70821af124737
OFAgent implementation of l2-population

Basically, this patch ports from l2-population codes of OVS.
But use a ryu library instead of executing a ovs-vsctl command.
And this does not contain a function of local arp responder.
That will be provided by an another patch.

related commit: b6133c35dd587f6b01e8ec12757347b2767713a6

Implements: blueprint ofagent-l2pop

Change-Id: I99a2adfd380a9fefe34c53e0dabc21d8cf5936cc

Conflicts:
	neutron/plugins/ofagent/agent/ofa_neutron_agent.py